Upload a file or zip to an application as a commit

Streams a multipart/form-data file to the application. A .zip is unpacked at the destination; other files are placed at path/name. The optional path query parameter controls the destination directory inside the application.

File names that look like path traversal, control characters, or ./.. are rejected. Content-Type is derived server-side from the extension.

Requires the workspace Maintainer or Administrator role (or ownership) when called against a workspace-shared application. Rate limits: 1 commit per 2s per user (global) and 1 commit per 5s per (user, application).